Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
File: 3EThniu05wI8wboQ1Jt07eS_hlw.mft (raw, json)
Hash identifier: w8z0RdyI04PG96ATzzNxqo1Ds8YXBbpZIy7DIxqlddQ=
Subject key identifier: 49:00:52:FD:10:64:40:63:11:3B:F2:A0:01:2B:99:3F:3F:B4:FB:0C
Authority key identifier: DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C
Certificate issuer: /CN=dc44e19e2bb4e7023cc1ba10d49b74ede4bf865c
Certificate serial: 019758DB4B25620C25821AD4F81B84EEAD2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
Manifest number: 0EE2
Signing time: Tue 10 Jun 2025 08:00:56 +0000
Manifest this update: Tue 10 Jun 2025 08:00:56 +0000
Manifest next update: Wed 11 Jun 2025 08:00:56 +0000
Files and hashes: 1: 3EThniu05wI8wboQ1Jt07eS_hlw.crl (hash: GRkQHiC4RodXP/KwCAXDbrIqCb7LemZV/zbW3+wbuG0=)
2: NO2hwXxk6AiYVNho9DdnmakKibo.roa (hash: KjRA6xm9G+dFvFvEr1pRfwpBhmr4/09q+ZWaH5ApdDY=)
3: On6R4nNTZ0YYv_0GBGytm6COqe8.roa (hash: bNbiiOOyNE6FHV7YY8Nd3d02QHZTqUZthKpv3jqVHn4=)
4: _UiUxv0oU2Vs8vl9aQlqGT-rguM.roa (hash: EibngS/6U5WbywdZke7WcdMlnrfByt82mvGn2UMi818=)
5: qnHwx7ZjqkHGMQ3UL_6iH_ZiPZ0.roa (hash: v6x8FXcAuZgdOrpOuZAffsHlmhE2j1MwJFDVe05keHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:db:4b:25:62:0c:25:82:1a:d4:f8:1b:84:ee:ad:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc44e19e2bb4e7023cc1ba10d49b74ede4bf865c
Validity
Not Before: Jun 10 08:00:56 2025 GMT
Not After : Jun 11 08:00:56 2025 GMT
Subject: CN=490052fd10644063113bf2a0012b993f3fb4fb0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:0b:6a:9e:a8:09:e0:27:4e:7a:1e:d7:d3:31:
de:e9:b1:bf:7e:ad:9f:27:a1:a6:91:9a:40:13:60:
66:db:da:46:ff:19:24:0f:41:7f:66:db:84:16:b1:
b4:1f:71:90:ac:84:ca:2f:09:00:0b:f8:57:14:f3:
33:d1:98:28:a3:74:aa:38:0c:ba:20:a7:d1:32:f7:
bc:0c:08:f9:11:2a:50:50:a2:b3:d4:88:9b:da:05:
2f:67:31:20:81:e8:5e:aa:f5:0e:ea:a8:82:68:d4:
1d:6c:3a:a3:5a:0e:17:cf:3c:40:bc:d4:79:d0:60:
29:b4:46:0b:6a:e8:a5:9c:1e:d8:e7:b9:f0:e6:8a:
de:e9:b4:f1:31:75:29:ba:0a:c7:a0:a5:ac:cd:1c:
09:f3:ad:7a:06:21:ac:62:0f:8e:49:7f:48:6e:54:
f1:3b:59:88:2b:7e:ba:5e:48:f5:d5:3d:6d:c8:a3:
db:c6:9e:54:f4:44:fe:9a:8e:4c:6b:56:6a:94:7c:
32:80:2e:c5:a9:49:61:eb:82:84:41:bc:ad:53:c9:
45:c2:87:77:c0:b2:46:fe:5a:ab:e7:a9:2e:91:4f:
72:73:92:84:2d:07:0f:b6:33:3a:3f:ea:d9:ec:c0:
15:60:f5:5f:56:5d:c0:7b:02:75:8f:37:a1:0a:b0:
c1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:00:52:FD:10:64:40:63:11:3B:F2:A0:01:2B:99:3F:3F:B4:FB:0C
X509v3 Authority Key Identifier:
keyid:DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:0a:60:ac:eb:3f:33:6c:2b:24:f2:80:54:38:07:80:59:9a:
95:cd:73:37:62:cc:52:ca:3b:e5:aa:06:30:1e:fb:41:a8:ad:
ec:f8:a5:a4:02:8e:33:62:b4:bb:4d:28:f9:cc:48:ee:45:e2:
3c:13:19:7a:8f:6e:99:b5:a5:dc:bd:17:4d:d5:e9:3f:cf:ed:
17:08:27:56:a0:29:7c:e3:12:61:4c:53:69:ad:48:e6:fd:15:
79:d0:59:97:bc:49:a1:6e:43:63:26:18:58:47:b9:f8:79:63:
6f:26:e4:6f:8a:8f:22:f9:4a:0b:98:98:a7:a4:66:ad:a5:b3:
fd:27:2d:a8:04:d0:4d:e9:02:47:75:32:86:2d:8f:2b:fc:6c:
37:c2:b9:d0:ac:6d:d5:63:68:66:08:99:5a:69:09:01:9b:f2:
d2:c6:34:b7:49:11:36:08:1b:df:98:ce:a7:73:8b:af:a4:18:
a3:35:8f:65:9b:7c:df:59:6e:b6:a8:da:54:33:72:29:85:4e:
15:47:49:e3:ab:24:bb:94:00:65:42:31:1b:87:95:e8:2f:75:
e0:d2:8f:db:9e:1c:e6:2f:24:ab:a6:3c:45:f2:8c:9a:61:b1:
fa:38:3f:a9:9e:c6:af:8c:76:00:b3:5e:87:7e:8d:e8:e4:3d:
f4:33:27:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdY20slYgwlghrU+BuE7q0uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNDRlMTllMmJiNGU3MDIzY2MxYmExMGQ0OWI3NGVkZTRi
Zjg2NWMwHhcNMjUwNjEwMDgwMDU2WhcNMjUwNjExMDgwMDU2WjAzMTEwLwYDVQQD
Eyg0OTAwNTJmZDEwNjQ0MDYzMTEzYmYyYTAwMTJiOTkzZjNmYjRmYjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6QtqnqgJ4CdOeh7X0zHe6bG/fq2f
J6GmkZpAE2Bm29pG/xkkD0F/ZtuEFrG0H3GQrITKLwkAC/hXFPMz0Zgoo3SqOAy6
IKfRMve8DAj5ESpQUKKz1Iib2gUvZzEggeheqvUO6qiCaNQdbDqjWg4XzzxAvNR5
0GAptEYLauilnB7Y57nw5ore6bTxMXUpugrHoKWszRwJ8616BiGsYg+OSX9IblTx
O1mIK366Xkj11T1tyKPbxp5U9ET+mo5Ma1ZqlHwygC7FqUlh64KEQbytU8lFwod3
wLJG/lqr56kukU9yc5KELQcPtjM6P+rZ7MAVYPVfVl3AewJ1jzehCrDBoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEkAUv0QZEBjETvyoAErmT8/tPsMMB8GA1UdIwQY
MBaAFNxE4Z4rtOcCPMG6ENSbdO3kv4ZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0VUaG5pdTA1d0k4d2JvUTFKdDA3ZVNfaGx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS80NmY1YjktNjAwMC00MDcyLTg5ZjIt
NGM4MmFjZTcyYzg1LzEvM0VUaG5pdTA1d0k4d2JvUTFKdDA3ZVNfaGx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS80NmY1YjktNjAwMC00MDcyLTg5ZjItNGM4MmFjZTcyYzg1
LzEvM0VUaG5pdTA1d0k4d2JvUTFKdDA3ZVNfaGx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUApgrOs/
M2wrJPKAVDgHgFmalc1zN2LMUso75aoGMB77Qait7PilpAKOM2K0u00o+cxI7kXi
PBMZeo9umbWl3L0XTdXpP8/tFwgnVqApfOMSYUxTaa1I5v0VedBZl7xJoW5DYyYY
WEe5+Hljbybkb4qPIvlKC5iYp6RmraWz/SctqATQTekCR3Uyhi2PK/xsN8K50Kxt
1WNoZgiZWmkJAZvy0sY0t0kRNggb35jOp3OLr6QYozWPZZt831lutqjaVDNyKYVO
FUdJ46sku5QAZUIxG4eV6C914NKP254c5i8kq6Y8RfKMmmGx+jg/qZ7Gr4x2ALNe
h36N6OQ99DMnHA==
-----END CERTIFICATE-----
Generated at Tue Jun 10 16:06:05 2025 by rpki-client